Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsOpen Watchtower from the sidebar in a 1Password app, or sign in to 1Password.com, select a vault, and choose Watchtower. Select a category or Show items to see which saved logins need attention. An alert identifies a finding about a saved item; it does not, by itself, prove that someone has accessed the account.
Use the dashboard to identify the issue, make any necessary change on the relevant website, and update the saved item in 1Password. The available categories depend on your saved data and which checks are enabled. 1Password’s Watchtower guide describes the dashboard and its findings.
As an Amazon Associate I earn from qualifying purchases.
Find Watchtower and narrow the list
In a 1Password app, select Watchtower in the sidebar. On 1Password.com, sign in, choose a vault, then select Watchtower. Choose a category or Show items to inspect the affected entries. You can filter the dashboard by account, collection, or vault to focus on the items you manage. The web dashboard’s context depends on the vault or account you select.
Watchtower organizes findings by issue, rather than treating every alert as the same kind of incident. A flagged login is a reason to review that item and, where appropriate, the corresponding site account.
#1 Best Overall
- POWERFUL SECURITY KEY: The Security Key C NFC is the essential physical passkey for protecting your digital life from phishing attacks. It ensures only you can access your accounts.
- WORKS WITH 1000+ ACCOUNTS: Compatible with Google, Microsoft, and Apple. A single Security Key C NFC secures 100 of your favorite accounts, including email, password managers, and more.
- FAST & CONVENIENT LOGIN: Plug in your Security Key C NFC via USB-C and tap it, or tap it against your phone (NFC) to authenticate. No batteries, no internet connection, and no extra fees required.
- TRUSTED PASSKEY TECHNOLOGY: Uses the latest passkey standards (FIDO2/WebAuthn & FIDO U2F) but does not support One-Time Passwords. For complex needs, check out the YubiKey 5 Series.
- BUILT TO LAST: Made from tough, waterproof, and crush-resistant materials. Manufactured in Sweden and programmed in the USA with the highest security standards.
Understand what each Watchtower finding means
Compromised websites
This category can include a saved login for a site where a breach has been reported if the password has not been changed since the breach. Change the password on that site, then update the saved login in 1Password. The finding is about the site and credential; it is not proof that your individual account was accessed.
Vulnerable passwords
A password in a saved item has appeared in breach data. That does not, on its own, show which account used the password or establish that an attacker knows your login. Change the password, especially if it is weak or used elsewhere. 1Password’s explanation of this check is in its Watchtower privacy documentation.
Reused passwords
Two or more saved items share a password. Change the affected credentials so that each account has a different password; otherwise, exposure of one credential could put other accounts that use it at risk.
Quick wins for a faster PC:
Clear out junk files and repair common Windows errorsFree Scan →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #2
- PHISHING-RESISTANT 2FA: Cryptographically binds to real domains, making phishing attacks impossible unlike SMS codes or authenticator apps.
- 3-SIDE CAPACITIVE TOUCH: Tap the end, left, or right side to authenticate, so it works in any orientation or crowded USB port.
- MULTI-COLOR LED INDICATOR: Blue means ready, blinking blue means tap now, green means success, and red means error for instant status feedback.
- IP68 WATERPROOF & BATTERY-FREE: Crush-resistant one-piece construction survives daily carry on a keychain or in a bag for years without any batteries.
- UNIVERSAL COMPATIBILITY: Works with Google, Microsoft, Apple, GitHub, AWS, and any FIDO2 / U2F / WebAuthn service, storing up to 100 passkeys.
Weak passwords
A saved password is easy to guess. Replace it with a strong, unique password. Avoid small variations on the old password; use 1Password’s password generator or another trustworthy password manager’s generator.
Passkeys available
A site supports passkeys, but the saved item does not contain one. If you want to switch, use the passkey action on the item and follow the site’s enrollment and recovery instructions. Passkey availability does not mean you must enroll; consider how you will recover access if you lose a device or change your sign-in setup.
Unsecured websites
A saved website address begins with http://, although Watchtower knows the site supports HTTPS. If the item offers Use HTTPS, confirm that the site supports HTTPS before changing the URL. This changes the saved address; it does not itself change a password or configure the website.
Rank #3
- USB-C or tap via NFC for easy authentication on any compatible device. No drivers needed; optional Kensington software available for advanced management features.
- Works across Windows, macOS, iOS, Android, ChromeOS, and supports Passkeys and Apple ID.
- Slim, keychain-ready form for easy carry and on-the-go authentication
- IP68-rated for dependable performance
- FIDO CTAP 2.1 for enhanced security features (e.g. resident credentials, Passkey support) and backwards compatibility with CTAP 2. FIDO2 L2 certified security for phishing resistant protection against identity theft and unauthorized access.
Two-factor authentication
The site supports two-factor authentication (2FA), but the saved item does not have a one-time password. Review the site’s security settings and enable an additional factor if appropriate. The available methods and setup steps differ by site; follow that site’s instructions.
Items in another account
A login contains an email address associated with a different 1Password account from the one where the item is saved. Review which account or vault should hold the login, then move it if needed.
Developer secrets on disk
Desktop users who have configured Developer Watchtower may see plaintext secrets, such as SSH private keys or .env files. Review the finding and use the Developer area to import or otherwise address the secret, rather than leaving sensitive credentials exposed in a file.
Rank #4
- Ultra-Compact FIDO2 Security Key - Plug-and-stay or carry on a keychain. This USB-A hardware security key offers portable, always-on protection for desktop and mobile use. (Item Size: 0.75 X 0.74 IN x 0.25 IN)
- USB-A Hardware Key for All Devices - Works with USB-A ports on PC, Mac, Android, and other laptop/notebook device. Enables secure, cross-platform login with FIDO2.0 passkey support.
- FIDO Certified Security Key - Meets FIDO and FIDO2 standards. Works with Google, Microsoft, GitHub, Dropbox, and more. Please check service compatibility before purchase.
- Passwordless Login with Passkey - Supports passkey login via WebAuthn and CTAP2. Enjoy password-free sign-ins where supported. Not all websites or services currently support passkeys.
- Advanced Multi-Factor Authentication - Offers 200 FIDO2 passkey slots and 50 OATH-TOTP slots. Strong, flexible 2FA/MFA support across various apps and authentication platforms.
Prioritize fixes and update saved logins
- Start with compromised sites, vulnerable passwords, and reused passwords. Visit each affected service directly, change the password there, and save the replacement in the corresponding 1Password item. If a password was reused, update every account that used it.
- Replace weak passwords with unique ones. Generate a strong password for each account and save it in 1Password. Do not make predictable edits to the old value.
- Turn on 2FA where it makes sense. Use the site’s own setup instructions. If you choose an authenticator code, store or manage it in a way that fits your account security needs.
- Consider passkeys and URL corrections. Enroll in a passkey only after reviewing the site’s enrollment and recovery options. Change an HTTP address to HTTPS only when the site supports HTTPS.
- Recheck the dashboard. Return to Watchtower and use the account, collection, or vault filters to review the items for which you are responsible.
For your 1Password account itself, the separate account-level 2FA guide describes authentication codes and security keys. 1Password recommends using a different authenticator app for the 1Password account than the OTP storage used for other services. See 1Password’s two-factor authentication guide. This account-level setting is distinct from Watchtower’s finding that another site supports 2FA.
Manage Watchtower checks and alerts
In the apps, select the relevant account or collection, then open Settings > Privacy to manage Watchtower checks. On 1Password.com, choose the account or vault context, open Settings, and select the Watchtower section. The exact controls can vary by client.
Free tools Windows power users keep installed
One-click scans. No signup required.
To receive an alert when a website is added to Watchtower, the browser guide gives this path: open the account menu, select Settings, then Security & privacy, and enable Check for vulnerable passwords. An item that needs attention can also display an alert banner. See the 1Password browser guide.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.What 1Password says about Watchtower privacy
According to 1Password, checks for reused passwords, weak passwords, unsecured websites, and expiring items happen locally on the device. For compromised websites, the app downloads Watchtower data and compares saved website information locally.
Best Value
- Security Key : Protect your online accounts against unauthorized access by using FIDO2 and U2F authentication with T110. It's the world's most protective security key that works with windows, Mac OS, Linux as well as Chrome, Firefox, Edge and many other major browsers.
- Certified with the new FIDO2 standard, T110 provides the benefit of fast login and strong protection against phishing, account takeover as well as many other online attactks.
- Works with : Bank of America, Github, Google, Microsoft, DUO, Twitter, Facebook, Dropbox, Apple, ebay, BINANCE, mor and more.
- Fits USB-A port : Insert the T110 security key into the USB-A port of each service and log in conveniently with one touch
- For the driver download and user guide, please visit TrustKey Solutions Home support page.
For vulnerable-password checks, 1Password says it creates a 40-character hash for each password and sends only the first five characters of each hash to Have I Been Pwned. That service returns matching hash prefixes, which 1Password compares on the device; the password itself is not sent. 1Password also cautions that similar weak passwords could create a privacy risk if the breach-check service acted maliciously, and recommends changing identified passwords and using strong, unique generated passwords. These are 1Password’s descriptions of its implementation; consult its privacy documentation for current details.
Personal Watchtower and 1Password Business reporting
The personal Watchtower dashboard is different from organization-wide reporting. 1Password Business Insights can provide administrators with organization views of breach findings and password health, including compromised, weak, and reused credentials and items without 2FA. Business Watchtower reports can also track issues across shared vaults. See 1Password’s Business Watchtower documentation for the organization-specific workflow.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallOutdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchQuick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
